Windows Server 2016 - Setup Local Domain Controller

    Windows Server 2016 - Setup Local Domain Controller

    How to Install Windows Server 2016 and Setup Local Domain Controller
    Published by
    2016-05-26
    Designer Media Ltd

    Published by


    Kari's Avatar
    Finnish but not finished


    Location: A Finnish ex-pat in Germany
    Posts: 9,571

    Show Printable Version 


    information   Information
    There are several reasons to create and use a local domain even in relatively small home networks. To list a few:
    • Centralized user management
    • Users sign in to domain instead of signing in to just a certain PC. No separate user account setup on each machine, a domain user can sign in on each domain joined machine, access level controlled by server admin
    • Centrally managed Group Policies; Restrict or expand user rights with group policies on server, all policies applied throughout the domain
    • And so on...

    To create a local domain, you need a Windows Server operating system (yes, of course you can set up a Linux server, too, but this is Windows 10 Forums! ). It can be installed on physical hardware with quite modest specifications, or on a virtual machine. Naturally, to guarantee that your domain and Active Directory which controls and manages the users and computers on your domain function, the server should be always on, up and running.

    Setting up an Active Directory Domain Controller can be divided to five phases:
    1. Install Windows Server
    2. Set up the server (static IP, updates, server name etc.)
    3. Create the domain
    4. Setup Active Directory Domain Services
    5. Create domain / AD users

    This tutorial will show you how to do this. When done, your users and computers can join your own local domain.

    The new Windows Server 2016 is now (end of May 2016) in version Technical Preview 5 and can be downloaded for free from Microsoft TechNet Evaluation Center: Technet Evaluation Center

    More information about Windows Server 2016: https://www.microsoft.com/en-us/serv...s-server-2016/

    More about Active Directory:

    Let's start! The tutorial might look long and complicated but please believe me, it's a piece of cake, doing everything told in this tutorial will take 30 to 40 minutes of your time, including the time needed to install Windows Server 2016


    warning   Warning
    To join a Windows PC or virtual machine to a domain, it must be PRO or better edition:
    • Windows 7 Professional, Ultimate, Enterprise
    • Windows 8 & 8.1 Pro, Enterprise
    • Windows 10 Pro, Education, Enterprise

    If your home computers have a Home edition of any Windows version, they cannot join a domain.


     Contents

    Part One: Install Windows Server 2016
    Part Two: Setup Windows Server 2016
    Part Three: Setup Active Directory Domain Controller
    Part Four: Create a domain
    Part Five: Add users to Active Directory
    Part Six: Additional videos

    Note   Note
    Click or tap screenshots in this tutorial to pop out them, click / tap again to enlarge.






    Windows Server 2016 - Setup Local Domain Controller Part One Windows Server 2016 - Setup Local Domain Controller
     Install Windows Server 2016


    1.1) Download Windows Server 2016: Technet Evaluation Center. Notice that you need to register to be able to download

    1.2) If installing on a virtual machine select the ISO file as install media. On a physical machine you need first to create a DVD or flash install media. See this tutorial for help: USB Flash Drive - Create to Install Windows 10 - Windows 10 Forums

    1.3) Boot from Windows Server 2016 install media

    1.4) When prompted, enter the generic product key shown in Preinstall Information:
    Click image for larger version. 

Name:	2016_05_27_15_15_281.png 
Views:	88 
Size:	106.7 KB 
ID:	81944

    Click image for larger version. 

Name:	2016_05_26_12_55_181.png 
Views:	401 
Size:	45.6 KB 
ID:	81682

    1.5) Select the Desktop Experience version:
    Click image for larger version. 

Name:	2016_05_26_12_56_201.png 
Views:	125 
Size:	48.5 KB 
ID:	81683

    1.6) Install Windows normally, as any other Windows version. When installation is done, you need to set the password for the built-in administrator
    Click image for larger version. 

Name:	2016_05_26_13_32_091.png 
Views:	248 
Size:	33.0 KB 
ID:	81695

    1.7) Press CTRL+ALT+DEL to enter the sign-in dialog, enter the password, hit Enter to sign in:
    Click image for larger version. 

Name:	2016_05_26_13_33_441.png 
Views:	60 
Size:	34.0 KB 
ID:	81696

    Click image for larger version. 

Name:	2016_05_26_13_34_192.png 
Views:	99 
Size:	31.5 KB 
ID:	81697






    Windows Server 2016 - Setup Local Domain Controller Part Two Windows Server 2016 - Setup Local Domain Controller
     Setup Windows Server 2016


    2.1) Server Dashboard opens automatically by default (when closed it can be opened from Start). First thing is to change the resolution, after the installation Windows defaults to 1024*768, aspect ratio 4:3. To work comfortably you need better resolution. Minimize the Dashboard, select Display Settings from desktop context menu. This warning will be shown:
    Click image for larger version. 

Name:	2016_05_26_13_44_052.png 
Views:	60 
Size:	11.3 KB 
ID:	81702

    Just ignore the warning, click Close to open display settings and change the resolution to what you prefer

    2.2)
    Maximize / open the Dashboard. Select Local Server on left pane
    Click image for larger version. 

Name:	2016_05_26_13_45_343.png 
Views:	112 
Size:	115.5 KB 
ID:	81703

    It is extremely important that Windows Server is fully updated before going any further. Click Never after Last checked for updates, run Windows Update, restart if prompted:

    Click image for larger version. 

Name:	2016_05_26_13_48_261.png 
Views:	161 
Size:	177.8 KB 
ID:	81705

    2.3) Change the computer name to something easier to remember and recognize. In this example I changed the name to TenForumsServer. Remember to restart after computer name change!

    2.4) Set a static IP address for server. Select an IP outside the DHCP IP pool your router uses to assign dynamic IP addresses.

    In this example I checked my router settings, learned that the IP pool it uses is from 192.168.2.100 to 192.168.2.200, router itself using 192.168.2.1:
    Name:  2016_05_27_10_33_321.png
Views: 6983
Size:  5.6 KB

    I chose 192.168.2.50 for the server, set it as static IP, setting both Default Gateway and Preferred DNS server to use the router IP 192.168.2.1:
    Click image for larger version. 

Name:	2016_05_27_10_42_052.png 
Views:	80 
Size:	90.2 KB 
ID:	81850

    Name:  2016_05_27_10_44_101.png
Views: 6978
Size:  22.1 KB




    Windows Server 2016 - Setup Local Domain Controller Part Three Windows Server 2016 - Setup Local Domain Controller
     Setup Active Directory Domain Controller


    3.1)
    Select Add Roles and Features from the Manage menu top right:
    Name:  2016_05_27_10_48_371.png
Views: 6990
Size:  18.0 KB

    3.2) Click Next:
    Click image for larger version. 

Name:	2016_05_27_10_49_432.png 
Views:	138 
Size:	57.9 KB 
ID:	81853

    3.3) Select Role-based or feature-based installation, click Next:
    Click image for larger version. 

Name:	2016_05_27_10_50_253.png 
Views:	68 
Size:	51.0 KB 
ID:	81854

    3.4) See that your server is listed, select it and choose Select a server from the server pool. Click Next:
    Click image for larger version. 

Name:	2016_05_27_10_52_114.png 
Views:	80 
Size:	80.0 KB 
ID:	81855

    3.5) Click on the selection box Active Directory Domain Services. A dialog opens, click Add Features:
    Click image for larger version. 

Name:	image.png 
Views:	71 
Size:	100.7 KB 
ID:	81969

    3.6) Click Next:
    Click image for larger version. 

Name:	2016_05_27_10_55_456.png 
Views:	62 
Size:	81.2 KB 
ID:	81858

    3.7) Click Next:
    Click image for larger version. 

Name:	2016_05_27_10_56_437.png 
Views:	67 
Size:	77.9 KB 
ID:	81859

    3.8) Click Next:
    Click image for larger version. 

Name:	2016_05_27_10_57_338.png 
Views:	69 
Size:	68.7 KB 
ID:	81860

    3.9) Click Install:
    Click image for larger version. 

Name:	2016_05_27_10_58_339.png 
Views:	57 
Size:	58.7 KB 
ID:	81861

    3.10) You can close the wizard now, installation continues in the background:
    Click image for larger version. 

Name:	2016_05_27_10_59_4010.png 
Views:	53 
Size:	66.6 KB 
ID:	81862





    Windows Server 2016 - Setup Local Domain Controller Part Four Windows Server 2016 - Setup Local Domain Controller
     Create a domain


    4.1)
    You should now see a yellow warning sign next to Notifications flag in menu bar top right. Click the flag to open the menu. When it tells you Installation succeeded on ServerName, select Promote this server to a domain controller:
    Name:  image.png
Views: 6923
Size:  33.4 KB

    4.2) Select Add a new forest, enter your chosen local domain name (prefix.suffix). In this example I named my domain as ten.forums:
    Click image for larger version. 

Name:	2016_05_27_11_11_372.png 
Views:	98 
Size:	65.7 KB 
ID:	81864
    Note   Note
    Local domain name guidelines

    A domain name as we have been used to see on Internet consists of subdomain (optional), domain and TLD (top level domain). They are separated with a dot.

    For example in domain name www.myownwebsite.com, the www is the subdomain, myownwebsite domain and com the TLD. My favourite news site from my native Finland is http://www.yle.fi, again the subdomain being www, the domain itself yle and the TLD the country code for Finland fi. Their on-demand TV I can find from http://areena.yle.fi where areena is subdomain, yle the domain and again fi as TLD.

    In naming local domains the subdomain can be used but is mostly left out as unnecessary. The local domain suffix can be almost anything you'd like to, important to remember is not to use any reserved top level domain suffixes like .com, .org, .net or the country TLDs like .co.uk, .fi, .fr and so on.

    TLD suffixes commonly used in local domains are for instance .loc and .local. My home domain is called agm.home, I'm used to name my home network domains with suffix .home but as it might happen that it will be registered as an available TLD for Internet, I need to rethink that and rename my domain.

    A local domain prefix (domain name) should be max 15 characters; if any longer, Windows Server uses the first 15 characters of it as so called NetBIOS name. The prefix may only contain letters A-Z, a-z, numbers 0-9 and one or more hyphens. It must contain at least one letter, a domain prefix containing numbers only is not allowed.

    4.3) This is important: on the next page of the wizard you need to set up a password you wish you will never need: A recovery password in case something goes awfully wrong and you need to run Directory Services Restore. Select a good password, it may but don't have to be the same as your server admin password. Click Next when done:
    Click image for larger version. 

Name:	2016_05_27_11_14_473.png 
Views:	74 
Size:	67.9 KB 
ID:	81865

    4.4) The DNS options page shows you a warning which you can completely ignore. Click Next:
    Click image for larger version. 

Name:	2016_05_27_11_17_014.png 
Views:	79 
Size:	58.1 KB 
ID:	81866

    4.5) On Additional Options page check that NetBIOS name is correct; it should be the prefix of your local domain. In this example I named my domain as ten.forums, the NetBIOS name therefore being TEN (NetBIOS names are usually written with upper case). Click Next:
    Click image for larger version. 

Name:	2016_05_27_11_18_375.png 
Views:	75 
Size:	56.5 KB 
ID:	81867

    4.6) Accept default paths, click Next:
    Click image for larger version. 

Name:	2016_05_27_11_43_451.png 
Views:	70 
Size:	43.4 KB 
ID:	81874

    4.7) Review your settings, click Next
    Click image for larger version. 

Name:	2016_05_27_11_46_121.png 
Views:	111 
Size:	58.3 KB 
ID:	81875

    4.8) You will now see a list of warnings. As long as the bottom of this list tells you that All prerequisite checks passed successfully, you can ignore the warnings and click Install:
    Click image for larger version. 

Name:	2016_05_27_11_47_352.png 
Views:	71 
Size:	85.9 KB 
ID:	81876

    4.9) Windows Server will restart automatically to finalize the installation:
    Click image for larger version. 

Name:	2016_05_27_11_49_313.png 
Views:	71 
Size:	58.3 KB 
ID:	81877

    4.10) Sign in. Notice the missing network connection:
    Click image for larger version. 

Name:	2016_05_27_12_01_062.png 
Views:	94 
Size:	126.7 KB 
ID:	81879

    4.11) Fix the DNS server IP error (see previous screenshot in step 4.10 for explanation), change it back to your default gateway IP. In my case now for this example I changed it back to 192.168.2.1:
    Name:  2016_05_27_12_07_501.png
Views: 6860
Size:  30.7 KB

    4.12) To be sure let's check Internet works. You cannot use Edge:
    Click image for larger version. 

Name:	2016_05_27_12_08_352.png 
Views:	58 
Size:	10.8 KB 
ID:	81884

    4.13) Instead open Internet Explorer (WIN+R, type iexplore, hit Enter). You will be notified that Enhanced Security is enabled. You need to manually add websites you want to visit to list of allowed sites:
    Click image for larger version. 

Name:	2016_05_27_12_11_064.png 
Views:	59 
Size:	136.9 KB 
ID:	81886

    4.14) Everything OK, Internet works. You can close the browser:
    Click image for larger version. 

Name:	2016_05_27_12_11_555.png 
Views:	55 
Size:	100.0 KB 
ID:	81887

    4.15) Dashboard > Local Server shows the domain is OK:
    Click image for larger version. 

Name:	2016_05_27_12_14_047.png 
Views:	63 
Size:	29.7 KB 
ID:	81889





    Windows Server 2016 - Setup Local Domain Controller Part Five Windows Server 2016 - Setup Local Domain Controller
     Add users to Active Directory


    5.1) A domain without users allowed to sign in is useless. To create users, open Tools menu, select Active Directory Users and Computers:
    Name:  2016_05_27_12_21_088.png
Views: 6844
Size:  28.0 KB

    5.2) Expand your domain, select Users, click New User button:
    Click image for larger version. 

Name:	2016_05_27_12_23_239.png 
Views:	67 
Size:	120.6 KB 
ID:	81891

    5.3) Add a user, click Next:
    Name:  2016_05_27_12_25_0310.png
Views: 6832
Size:  20.1 KB

    5.4) Set password for this user. As this is a private home domain, select Password never expires, click Next:
    Name:  2016_05_27_12_28_3711.png
Views: 6829
Size:  35.9 KB

    5.5) Review the information, click Finish:
    Name:  2016_05_27_12_29_0712.png
Views: 6827
Size:  17.6 KB

    5.6) The first user is usually yourself. To add this user to Administrators, right click the user and select Properties:
    Click image for larger version. 

Name:	2016_05_27_12_30_581.png 
Views:	52 
Size:	116.3 KB 
ID:	81895

    5.7) Add user to Administrators:
    Click image for larger version. 

Name:	2016_05_27_12_33_462.png 
Views:	59 
Size:	175.2 KB 
ID:	81896

    5.8) In the future you can sign in to server with your own domain user credentials
    Click image for larger version. 

Name:	2016_05_27_12_35_153.png 
Views:	81 
Size:	73.3 KB 
ID:	81897
    Click image for larger version. 

Name:	2016_05_27_12_37_574.png 
Views:	73 
Size:	689.4 KB 
ID:	81900





    Windows Server 2016 - Setup Local Domain Controller Part Six Windows Server 2016 - Setup Local Domain Controller
     Additional videos














     That's it!


    Note   Note
    Your domain is set up and running. Now you can join your devices to the domain.

    Managing users and computers, group policies and much more in future tutorials and videos.

    Kari

  1. Joined : Oct 2013
    Posts : 17,468
    64-bit Windows 10 Pro build 15014
       2016-05-27 #1

    Nice tutorial Kari.
      My System SpecsSystem Spec


  2. Joined : Oct 2013
    A Finnish ex-pat in Germany
    Posts : 9,571
    Windows 10 Pro
       2016-05-27 #2

    Thanks Brink
      My System SpecsSystem Spec


  3. Joined : Apr 2015
    Posts : 9,154
    W10Prox64
       2016-05-27 #3

    Very good Kari. Your instructions are always precise and easy to follow.
      My System SpecsSystem Spec


  4. Joined : Oct 2013
    A Finnish ex-pat in Germany
    Posts : 9,571
    Windows 10 Pro
       2016-05-27 #4

    Thanks Simrick!

    My goal was to make it as simple as possible to follow without any knowledge about the subject, even when it meant a lot of screenshots, to make sure that someone who has never installed a server OS or set up a domain can manage it.
      My System SpecsSystem Spec


  5. Joined : Apr 2015
    Posts : 9,154
    W10Prox64
       2016-05-27 #5

    Kari said: View Post
    Thanks Simrick!

    My goal was to make it as simple as possible to follow without any knowledge about the subject, even when it meant a lot of screenshots, to make sure that someone who has never installed a server OS or set up a domain can manage it.
    And that would be me....
      My System SpecsSystem Spec


  6. Joined : Oct 2013
    Texas
    Posts : 7,537
    Windows 10 Pro X64
       2016-05-27 #6

    Well done Kari, impressive job
      My System SpecsSystem Spec


  7. Joined : Oct 2013
    A Finnish ex-pat in Germany
    Posts : 9,571
    Windows 10 Pro
       2016-05-27 #7

    Thanks Dude
      My System SpecsSystem Spec


  8. Joined : Sep 2014
    Posts : 2,923
    Windows 10 Pro
       2016-05-27 #8

    You should make sure to mention that, while the technical preview is free... it won't remain so. Some people might have a rude awakening to find out they have to pay several hundred dollars to keep their network running.
      My System SpecsSystem Spec


 


Similar Threads
Tutorial Category
Final public test builds of Windows Server 2016 and System Center 2016
Read more: Microsoft delivers final public test builds of Windows Server 2016, System Center 2016 | ZDNet See also: What's New in Windows Server 2016 Technical Preview 5
Windows 10 News
SharePoint Server 2016 and Project Server 2016 RC available
Source: SharePoint Server 2016 and Project Server 2016 Release Candidate available - Office Blogs
Windows 10 News
How to Dispay Domain Controller computers in Windows 10 PRO Explorer
Your Linux based NAS not showing up in Windows File Explorer view? I had this problem with 2 Win 10 PRO installations. Now mind you I have 3 Win 10 Home installs that did not have this issue so if yours is a Win 10 Home install this will not...
Network and Sharing
domain server problems
I have had windows 10 a couple weeks and if this issue had not starter a week before that I would blame 10. My internet cuts off at random times, sometimes just for seconds and sometimes I have to turn off modem and restart. At first the...
Network and Sharing
Windows Server 2016 leaks reveal Nano Server, protected VM role plans
Read more: Windows Server 2016 leaks reveal Nano Server, protected VM role plans | ZDNet
Windows 10 News
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 18:49.
Find Us
Twitter Facebook Google+



Windows 10 Forums